Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3231342e3137332e302f32342d3234203d3e20323033303631.roa
File: 3138352e3231342e3137332e302f32342d3234203d3e20323033303631.roa (raw, json)
Hash identifier: /T31yljZE/x0ybwl2fBzVBRWZADbtsCgxz4mmUYc7u8=
Subject key identifier: 85:0B:8C:7C:1F:DB:FC:2F:42:E5:66:5B:7B:17:7D:81:AC:A4:C3:13
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 427D6FDE82EADB728F334678162D742A2D3D1FFD
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3231342e3137332e302f32342d3234203d3e20323033303631.roa
Signing time: Fri 09 Dec 2022 05:13:31 +0000
ROA not before: Fri 09 Dec 2022 05:08:31 +0000
ROA not after: Fri 08 Dec 2023 05:13:31 +0000
asID: 203061
IP address blocks: 185.214.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:7d:6f:de:82:ea:db:72:8f:33:46:78:16:2d:74:2a:2d:3d:1f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:08:31 2022 GMT
Not After : Dec 8 05:13:31 2023 GMT
Subject: CN=850B8C7C1FDBFC2F42E5665B7B177D81ACA4C313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:92:0b:cf:a6:5e:d2:69:df:c6:ea:51:c5:
ea:5c:7d:47:bf:da:6a:e8:9e:de:a9:eb:7c:e9:fb:
cc:c8:02:2a:fb:1b:01:74:11:51:66:e1:7f:6f:d1:
34:a9:ef:c9:e3:28:89:bf:21:4b:45:1e:fa:46:2d:
60:b1:65:bb:a9:6d:e7:4d:ef:89:d2:79:79:12:81:
f4:18:85:07:f3:81:d8:09:41:72:43:a5:f2:d3:c6:
22:53:a7:99:5c:8b:42:b9:b7:54:b6:ed:57:6e:26:
9c:3e:cf:75:35:fa:38:f5:39:fc:18:7e:57:cf:37:
f7:ca:c6:4b:02:53:9d:59:cc:7f:33:49:64:a0:99:
b8:ab:3e:87:ad:9a:23:82:97:dc:42:81:2e:06:12:
09:72:ef:d9:3c:41:4f:ce:22:86:8b:ff:d6:4a:98:
0d:8b:3d:5a:e8:ad:fd:c2:5e:f4:6b:47:4b:4c:46:
af:40:78:d7:2b:88:b2:da:6b:e8:30:89:18:3e:c9:
9d:ef:ee:12:48:6d:37:39:66:5f:ad:0d:ff:a6:2c:
0e:60:79:24:a7:da:cc:0b:ae:5e:43:f7:f1:1c:5b:
6b:20:ee:7e:79:eb:b1:8e:c5:57:88:7e:ff:f9:98:
3c:40:c9:23:88:37:ce:9d:1c:6c:87:59:b1:ce:cd:
2c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0B:8C:7C:1F:DB:FC:2F:42:E5:66:5B:7B:17:7D:81:AC:A4:C3:13
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3231342e3137332e302f32342d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:7b:30:02:b6:62:04:48:04:b5:06:39:ca:41:f3:7f:71:ca:
46:76:c1:af:e7:33:fa:55:f5:3f:ec:8c:50:3a:c9:d7:a3:a6:
85:5c:dd:a1:18:07:27:de:53:1a:d4:8b:46:40:ef:c0:c1:8e:
2f:01:1e:a2:ee:7c:2a:a0:b4:48:01:c3:0b:d0:7c:e4:d7:53:
68:a8:f1:c6:aa:1f:cb:9e:49:e1:ff:19:06:a8:31:92:4a:d6:
09:43:38:2c:23:d8:3b:c7:c8:e8:3d:6c:e3:60:9f:16:b1:34:
7f:68:25:05:5b:e2:d0:d1:9e:cd:cb:ea:f1:5c:0f:d6:42:e8:
72:da:86:06:b5:d0:25:5a:17:54:eb:7d:6a:7f:b2:71:8d:8d:
13:8a:36:bd:d3:d8:da:d3:59:90:79:be:bb:62:85:94:f6:1b:
90:99:4b:28:3e:87:de:1e:f2:8c:7f:30:63:51:82:f2:b8:f0:
f5:8d:5d:69:c3:6b:b8:66:20:bc:45:90:c2:67:40:7b:e2:a1:
5c:99:9f:87:10:2a:f0:33:b7:84:da:1c:a5:43:1f:4c:e0:5f:
61:dc:bc:2f:c5:9c:2e:9b:99:95:08:9e:ec:d1:e7:77:74:89:
0f:ea:43:cb:3d:88:7c:f9:92:a2:a7:af:9d:f8:45:72:46:3d:
74:64:94:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:35 2025 by rpki-client